Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e342e302f32332d3233203d3e203631373137.roa
File:                     3133312e37322e342e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          inN6BRfDGhfflILBI9rofgaMS+w7WU0QnsN+daH0GNo=
Subject key identifier:   66:AF:9F:25:36:C7:BF:7A:61:C6:69:B8:3B:01:FE:43:2C:30:EF:95
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       13DA18911E3892AEE62EF300429B0CC6EC7CBA48
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e342e302f32332d3233203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:50 +0000
ROA not before:           Thu 04 Apr 2024 15:32:50 +0000
ROA not after:            Thu 03 Apr 2025 15:37:50 +0000
asID:                     61717
IP address blocks:        131.72.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl
                          rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:18:91:1e:38:92:ae:e6:2e:f3:00:42:9b:0c:c6:ec:7c:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:50 2024 GMT
            Not After : Apr  3 15:37:50 2025 GMT
        Subject: CN=66AF9F2536C7BF7A61C669B83B01FE432C30EF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:7d:8c:21:af:0f:1d:c9:e4:14:a5:74:05:
                    7c:d8:77:08:72:e8:d6:07:e3:80:0a:89:46:4d:1d:
                    48:9e:d0:66:90:7e:73:d9:3b:39:ab:84:60:41:e4:
                    ab:20:a8:e0:bc:16:76:5d:4a:55:67:f4:cc:31:20:
                    85:d6:38:2f:61:73:f5:80:7c:22:c1:51:bb:90:89:
                    87:2e:15:ed:b4:c4:98:38:63:01:c3:2a:bb:a4:b4:
                    8f:93:a0:ce:95:e8:2c:06:9e:ba:42:d3:79:88:29:
                    44:7e:41:92:ca:b5:4e:ad:eb:3b:7d:cc:a4:d5:c5:
                    c0:b0:72:59:36:74:db:56:73:46:9d:92:49:df:be:
                    e5:ba:02:a5:f3:12:f5:32:1c:0c:5b:7e:db:1a:8f:
                    1a:dc:c7:71:b6:d1:3e:8b:1f:a2:cb:21:57:1b:51:
                    15:ee:cc:df:3b:a4:f4:58:39:84:b8:b0:d9:2e:6c:
                    b3:5b:1b:9f:b1:f7:bb:c9:10:ab:b1:25:2d:d7:3f:
                    7c:3c:ef:b6:80:c8:bb:96:41:62:f9:eb:a8:d1:41:
                    e5:c2:35:12:e8:09:cb:87:16:30:e6:1b:fe:80:41:
                    a9:c2:74:3f:6f:58:0b:5b:df:b1:22:08:37:3a:ff:
                    bd:f0:dc:3f:0d:56:bc:29:00:cd:50:22:d1:ae:21:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:9F:25:36:C7:BF:7A:61:C6:69:B8:3B:01:FE:43:2C:30:EF:95
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3133312e37322e342e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:98:96:09:4a:0c:4f:50:0e:f7:fa:40:44:3f:11:dd:1f:
         6a:83:a0:ff:11:e7:b4:f5:9a:bf:e7:b8:d3:4e:16:0e:f4:3a:
         97:5e:e4:58:b2:e5:a4:e8:c1:55:6b:dd:96:12:db:59:f4:24:
         23:b6:64:da:48:14:22:70:64:92:0e:e6:5a:02:71:78:cb:fb:
         d1:90:b9:f5:d1:21:21:36:c5:f9:02:06:cb:76:25:47:e7:6b:
         95:d1:2b:86:61:ce:7e:d5:54:b0:88:92:96:43:fd:6a:57:76:
         5f:0a:9e:f0:44:81:11:cf:5f:43:58:71:fb:05:41:c3:13:40:
         53:4b:cb:81:90:9d:91:c8:f1:93:5b:6a:07:9c:92:6e:db:51:
         36:d3:98:7d:6a:75:e7:76:16:0f:5d:6b:aa:f0:65:1f:e2:c8:
         f3:d6:02:51:56:d2:89:c3:e0:0f:c3:45:86:0d:a2:7b:c6:86:
         81:0d:a3:8d:0c:53:17:e9:f9:49:df:93:d8:bd:c7:2a:22:73:
         51:10:54:46:80:c0:a1:ca:12:29:39:5d:6d:23:b5:bc:f7:fe:
         8c:87:36:66:0a:63:ea:30:89:d4:5b:28:59:0b:bc:a5:b8:7b:
         4a:ed:d5:4f:c1:a8:c3:84:5c:56:90:72:8f:6d:61:67:d3:f5:
         e8:11:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:35 2024 by rpki-client on console-fra.rpki-client.org